Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit

MEDIUM 5.4CVE-2023-0780 · GHSA-gm7m-rqf8-jx4m · Published 11/02/2023 · updated 17/06/2026

In short

CVE-2023-0780 is a MEDIUM (CVSS 5.4) vulnerability affecting cockpit-hq/cockpit, cockpit (agentejo).
Chance of exploitation in the next 30 days (EPSS): 0.37%, higher than 31.3% of all vulnerabilities.
Fix: update to 2.3.9 or later.

Package	Affected versions	Patched versions
cockpit-hq/cockpit Packagist	`< 2.3.9`	`2.3.9`
cockpit agentejo	`< 2.3.9`	`2.3.9`

Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9.

NVD description

Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.3.9

2.3.9

< 2.3.9

2.3.9

More vulnerabilities in cockpit-hq/cockpit

See all →